sandipchitale

package sandipchitale.webclient;

import org.springframework.boot.SpringApplication;
import org.springframework.boot.autoconfigure.SpringBootApplication;
import org.springframework.http.HttpHeaders;
import org.springframework.http.HttpStatusCode;
import org.springframework.http.ResponseEntity;
import org.springframework.http.client.reactive.ClientHttpRequest;
import org.springframework.http.server.reactive.ServerHttpRequest;
import org.springframework.web.bind.annotation.*;

sandipchitale

body(BodyInserters.fromResource(new InputStreamResource(inputStream)))

sandipchitale

	@Bean
	public WebSecurityCustomizer webSecurityCustomizer() {
		return (web) -> web.ignoring()
				.requestMatchers(
                    // To avoid wrapping in MvcMatcher make sure to use AntPathRequestMatcher
                    AntPathRequestMatcher.antMatcher("/index.html"),
                    AntPathRequestMatcher.antMatcher("/**/*.css")
				);
	}

sandipchitale

    @Bean
    @Order(Ordered.HIGHEST_PRECEDENCE)
    public SecurityFilterChain authorizationServerSecurityFilterChain(HttpSecurity httpSecurity,
                                                                      OAuth2TokenGenerator<?> tokenGenerator,
                                                                      RegisteredClientRepository registeredClientRepository) throws Exception {
        OAuth2AuthorizationServerConfiguration.applyDefaultSecurity(httpSecurity);
        OAuth2AuthorizationServerConfigurer oAuth2AuthorizationServerConfigurer =
                httpSecurity.getConfigurer(OAuth2AuthorizationServerConfigurer.class);
        oAuth2AuthorizationServerConfigurer.registeredClientRepository(registeredClientRepository);

sandipchitale

	@Order(Ordered.LOWEST_PRECEDENCE)
	public static class OAuth2ClientPropertiesSchemeAdjusterEnvironmentPostProcessor implements EnvironmentPostProcessor {

		@Override
		public void postProcessEnvironment(ConfigurableEnvironment environment, SpringApplication application) {
			String asScheme = "http";
			if ("true".equals(environment.getProperty("server.ssl.enabled"))) {
				asScheme = "https";
			}

sandipchitale

	@Component
	public class OAuth2ClientPropertiesSchemeAdjusterBeanPostProcessor implements BeanPostProcessor, EnvironmentAware {

		private Environment environment;

		@Override
		public Object postProcessAfterInitialization(Object bean, String beanName) throws BeansException {
			if (bean instanceof OAuth2ClientProperties oAuth2ClientProperties) {
				String tokenUri = oAuth2ClientProperties.getProvider().get("as").getTokenUri();
				if ("true".equals(environment.getProperty("server.ssl.enabled"))) {

sandipchitale

	private static String secret = UUID.randomUUID().toString();
	private static SecretKey key = new SecretKeySpec(secret.getBytes(), "HmacSHA256");
	private static JWKSource<SecurityContext> immutableSecret = new ImmutableSecret<SecurityContext>(key);

	@Bean
	public OAuth2TokenCustomizer<JwtEncodingContext> jwtCustomizer() {
		return context -> {
			JwsHeader.Builder headers = context.getJwsHeader();
			if (context.getTokenType().equals(OAuth2TokenType.ACCESS_TOKEN) || context.getTokenType().equals(OAuth2TokenType.REFRESH_TOKEN)) {
				// We are using HS256 with shared secret key

sandipchitale

Springboot notes

OAuth2ClientAuthenticationFilter:

OAuth2ClientAuthenticationToken -> ClientSecretAuthenticationProvider -> OAuth2ClientAuthenticationToken

OAuth2TokenEndpointFilter:
OAuth2ClientCredentialsAuthenticationToken -> OAuth2ClientCredentialsAuthenticationProvider -> OAuth2AccessTokenAuthenticationToken

sandipchitale

import jakarta.servlet.ServletContext;
import jakarta.servlet.http.HttpServletRequest;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.context.annotation.Configuration;
import org.springframework.core.env.Environment;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.RestController;

sandipchitale

	@Bean
	@ConditionalOnWebApplication
	@ConditionalOnNotWarDeployment()
	public CommandLineRunner clrNotInWar() {
	    return (args) -> {
			System.out.println("Not running as war!");
	    };
	}

	static class OnWarDeployment extends NoneNestedConditions {